# worldlibirtyfinance-1y4.pages.dev — MALICIOUS

> worldlibirtyfinance-1y4.pages.dev is flagged as malicious by PhishDestroy threat intelligence.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 403)

## Domain Intelligence
- Registered: 2026-04-04 12:07:01
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.193
- Nameservers: andronicus.ns.cloudflare.com kelly.ns.cloudflare.com

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "Chong Lua Dao", "CyRadar", "Fortinet", "G-Data", "Kaspersky", "LevelBlue", "Lionic", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Live Page Content

### Page Text
Suspected phishing site | Cloudflare Please enable
      cookies. Warning Suspected Misleading Website This website has been reported for potentially misrepresenting itself as a particular brand or service. This claim has not been validated by Cloudflare due to limited information. Ignore & Proceed Cloudflare Ray ID: 9ea715ffbcbaee82 • Your IP: Click to reveal 104.28.162.240 • Performance & security by Cloudflare

### External Scripts
- https://challenges.cloudflare.com/turnstile/v0/api.js

### Form Fields
- original_path
- submit
- atok
- hidden

### External Links
- https://www.cloudflare.com/5xx-error-landing

## Evidence
- Screenshot: https://urlscan.io/screenshots/019d5863-ff70-70b2-b66d-4e0c24b22d78.png
- PhishDestroy: https://phishdestroy.io/domain/worldlibirtyfinance-1y4.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/worldlibirtyfinance-1y4.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/worldlibirtyfinance-1y4.pages.dev/
Last updated: 2026-04-11